| [4/5] netfilter: xt_CT: fix assignation of the generic protocol tracker |
2012-03-23 |
Pablo Neira |
|
Accepted |
| [3/5] netfilter: xt_CT: missing rcu_read_lock section in timeout assignment |
2012-03-23 |
Pablo Neira |
|
Accepted |
| [2/5] netfilter: cttimeout: fix dependency with l4protocol conntrack module |
2012-03-23 |
Pablo Neira |
|
Accepted |
| [1/5] netfilter: xt_LOG: use CONFIG_IP6_NF_IPTABLES instead of CONFIG_IPV6 |
2012-03-23 |
Pablo Neira |
|
Accepted |
| mark newly opened fds as FD_CLOEXEC (close on exec) [part 2] |
2012-03-21 |
Maciej Żenczykowski |
|
Accepted |
| netfilter: remove forward module param confusion. |
2012-03-22 |
Rusty Russell |
|
Accepted |
| scheduling while atomic followed by oops upon conntrackd -c execution |
2012-03-04 |
Pablo Neira |
|
Accepted |
| netfilter: ctnetlink: fix race between delete and timeout expiration |
2012-03-16 |
Pablo Neira |
|
Accepted |
| manpage fixes for conntrack-tools |
2012-03-19 |
Adrian Bridgett |
|
Accepted |
| netfilter: nf_ct_tcp: extend log message for invalid ignored packets |
2012-05-14 |
Pablo Neira |
|
Accepted |
| netfilter: potential NULL dereference in get_inner_hdr() |
2012-05-12 |
Dan Carpenter |
|
Accepted |
| libxt_hashlimit: add support for byte-based operation |
2012-05-08 |
Florian Westphal |
|
Accepted |
| [5/5] netfilter: hashlimit: byte-based limit mode |
2012-05-09 |
Pablo Neira |
|
Accepted |
| [4/5] netfilter: hashlimit: move rateinfo initialization to helper |
2012-05-09 |
Pablo Neira |
|
Accepted |
| [3/5] netfilter: limit, hashlimit: avoid duplicated inline |
2012-05-09 |
Pablo Neira |
|
Accepted |
| iptables: missing free() in function delete_entry() |
2012-03-08 |
Christian Engelmayer |
|
Accepted |
| iptables: missing free() in function cache_add_entry() |
2012-03-08 |
Christian Engelmayer |
|
Accepted |
| netfilter: ipt_LOG: add __printf() to sb_add() |
2012-03-01 |
Eric Dumazet |
|
Accepted |
| [23/23] netfilter: xt_LOG: add __printf() to sb_add() |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [22/23] netfilter: xt_CT: allow to attach timeout policy + glue code |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [21/23] netfilter: nf_ct_ext: add timeout extension |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [20/23] netfilter: add cttimeout infrastructure for fine timeout tuning |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [19/23] netfilter: nf_conntrack: pass timeout array to l4->new and l4->packet |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [18/23] netfilter: nf_ct_gre: add unsigned int array to define timeouts |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [17/23] netfilter: nf_ct_tcp: move retransmission and unacknowledged timeout to array |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [16/23] netfilter: nf_ct_udp[lite]: convert UDP[lite] timeouts to array |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [15/23] netfilter: ctnetlink: fix lockep splats |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [14/23] netfilter: xt_LOG: fix bogus extra layer-4 logging information |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [13/23] netfilter: remove ipt_SAME.h and ipt_realm.h |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [12/23] netfilter: nf_ct_ecache: refactor nf_ct_deliver_cached_events |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [11/23] netfilter: nf_ct_ecache: trailing whitespace removed |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [10/23] netfilter: merge ipt_LOG and ip6_LOG into xt_LOG |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [09/23] netfilter: ctnetlink: allow to set expectfn for expectations |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [08/23] netfilter: ctnetlink: add NAT support for expectations |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [07/23] netfilter: ctnetlink: allow to set expectation class |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [06/23] netfilter: ctnetlink: allow to set helper for new expectations |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [05/23] netfilter: ipset: hash:net,iface timeout bug fixed |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [04/23] netfilter: ipset: Exceptions support added to hash:*net* types |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [03/23] netfilter: ipset: Log warning when a hash type of set gets full |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [02/23] netfilter: ipset: expose userspace-relevant parts in ip_set.h |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [01/23] netfilter: ipset: use NFPROTO_ constants |
2012-03-08 |
Pablo Neira |
|
Accepted |
| [1/4] Netfilter: Merge ipt_LOG and ip6_LOG into xt_LOG |
2012-03-04 |
Pablo Neira |
|
Accepted |
| [5/7] netfilter: add cttimeout infrastructure for fine timeout tuning |
2012-03-04 |
Pablo Neira |
|
Accepted |
| [7/7] netfilter: xt_CT: allow to attach timeout policy + glue code |
2012-03-04 |
Pablo Neira |
|
Accepted |
| [6/7] netfilter: nf_ct_ext: add timeout extension |
2012-03-04 |
Pablo Neira |
|
Accepted |
| [4/7] netfilter: nf_conntrack: pass timeout array to l4->new and l4->packet |
2012-03-04 |
Pablo Neira |
|
Accepted |
| [3/7] netfilter: nf_ct_gre: add unsigned int array to define timeouts |
2012-03-04 |
Pablo Neira |
|
Accepted |
| [2/7] netfilter: nf_ct_tcp: move retransmission and unacknowledged timeout to array |
2012-03-04 |
Pablo Neira |
|
Accepted |
| [1/7] netfilter: nf_ct_udp[lite]: convert UDP[lite] timeouts to array |
2012-03-04 |
Pablo Neira |
|
Accepted |
| [1/4] Netfilter: Merge ipt_LOG and ip6_LOG into xt_LOG |
2012-03-01 |
Richard Weinberger |
|
Accepted |
| netfilter: ctnetlink: remove incorrect spin_[un]lock_bh on NAT module autoload |
2012-03-03 |
Pablo Neira |
|
Accepted |
| [1/1] conntrack, suspicious RCU usage |
2012-03-05 |
Hans Schillstrom |
|
Accepted |
| [v2] bridge: netfilter: don't call iptables on vlan packets if sysctl is off |
2012-03-05 |
Florian Westphal |
|
Accepted |
| netfilter: bridge: fix module autoload in compat case |
2012-03-01 |
Pablo Neira |
|
Accepted |
| Resend [PATCH] netfilter: Fix copy_to_user too small size parametre. |
2012-03-01 |
santosh nayak |
|
Accepted |
| [2/3] netfilter: potential null derefence. |
2012-03-01 |
santosh nayak |
|
Accepted |
| [6/6] Add extern "C" guard for C++ compilation mode |
2012-02-29 |
Jan Engelhardt |
|
Accepted |
| [5/6] const-ify arguments of functions |
2012-02-29 |
Jan Engelhardt |
|
Accepted |
| [4/6] Properly NUL-terminate name in nfct_timeout_attr_set |
2012-02-29 |
Jan Engelhardt |
|
Accepted |
| [3/6] Add stdint header and type corrections |
2012-02-29 |
Jan Engelhardt |
|
Accepted |
| [2/6] const-ify static data objects |
2012-02-29 |
Jan Engelhardt |
|
Accepted |
| [1/6] Add .gitignore |
2012-02-29 |
Jan Engelhardt |
|
Accepted |
| libnetfilter_cttimeout: misc cleanup |
2012-02-29 |
Jan Engelhardt |
|
Accepted |
| [1/4] Revert: add new libnetfilter_queue API for libmnl |
2013-04-26 |
Florian Westphal |
|
Rejected |
| Formal submission of Xtables2 |
2012-12-13 |
Jan Engelhardt |
|
Rejected |
| [V2,3/3] Remove VLAIS usage from netfilter |
2012-10-30 |
Behan Webster |
|
Rejected |
| [V2,2/3] Remove VLAIS usage from gadget code |
2012-10-30 |
Behan Webster |
|
Rejected |
| [V2,1/3] Helper macros used for replacing the use of VLAIS |
2012-10-30 |
Behan Webster |
|
Rejected |
| [2/2] Remove VLAIS usage from netfilter |
2012-10-30 |
Behan Webster |
|
Rejected |
| [1/2] Helper macros used for replacing the use of VLAIS |
2012-10-30 |
Behan Webster |
|
Rejected |
| nfnetlink: add a new subsystem to advertise tables update |
2012-09-24 |
Nicolas Dichtel |
|
Rejected |
| [RFC,1/1] xtables: allow to monitor table update event |
2012-10-02 |
Nicolas Dichtel |
|
Rejected |
| Increasing XT_EXTENSION_MAXNAMELEN to 32 |
2012-09-29 |
Amerigo Wang |
|
Rejected |
| [v2,1/6] netfilter: sanity checks on NFPROTO_NUMPROTO |
2012-05-14 |
Alban Crequy |
|
Rejected |
| [1/6] netfilter: sanity checks on NFPROTO_NUMPROTO |
2012-05-14 |
Alban Crequy |
|
Rejected |
| [RFC] netfilter: don't assume NFPROTO_* are like PF_* |
2012-05-14 |
Alban Crequy |
|
Rejected |
| iptables-save: fix don't show counters by default |
2012-05-10 |
Nicolas CARRIER |
|
Rejected |
| iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7) |
2012-07-23 |
Pablo Neira |
|
Rejected |
| [2/2] netfilter: nf_ct_expect: fix possible invalid dereference while event reporting |
2012-08-09 |
Pablo Neira |
|
Rejected |
| [1/2] netfilter: nf_ct_expect: fix re-insertion in expect list if timer refresh fails |
2012-08-09 |
Pablo Neira |
|
Rejected |
| [RFC,2/2] netfilter: conntrack: replace mutex with cmpxchg |
2012-04-27 |
Benjamin Poirier |
|
Rejected |
| [RFC,1/2] netfilter: conntrack: remove RCU usage in conntrack notifier |
2012-04-27 |
Benjamin Poirier |
|
Rejected |
| [2/2] netfilter: ipvs: use GFP_KERNEL allocation where possible |
2012-04-23 |
Simon Horman |
|
Rejected |
| [1/2] netfilter: ipvs: Verify that IP_VS protocol has been registered |
2012-04-23 |
Simon Horman |
|
Rejected |
| [GIT,PULL,net] IPVS |
2012-04-23 |
Simon Horman |
|
Rejected |
| [12/12] netfilter: export necessary function for generic proto |
2012-04-17 |
Gao feng |
|
Rejected |
| [11/12] netfilter: udplite proto sysctl support for net |
2012-04-17 |
Gao feng |
|
Rejected |
| [10/12] netfilter: sctp proto sysctl support for net namespace |
2012-04-17 |
Gao feng |
|
Rejected |
| [09/12] netfilter: ipv6 sysctl support for net namespace |
2012-04-17 |
Gao feng |
|
Rejected |
| [08/12] netfilter: ipv4 sysctl support for net namespace |
2012-04-17 |
Gao feng |
|
Rejected |
| [07/12] netfilter: icmpv6 proto sysctl support for net |
2012-04-17 |
Gao feng |
|
Rejected |
| [06/12] netfilter: icmp proto sysctl support for net namespace |
2012-04-17 |
Gao feng |
|
Rejected |
| [05/12] netfilter: udp proto sysctl support for net namespace |
2012-04-17 |
Gao feng |
|
Rejected |
| [04/12] netfilter: tcp proto sysctl support for net namespace |
2012-04-17 |
Gao feng |
|
Rejected |
| [03/12] netfilter: generic proto sysctl support for net namespace |
2012-04-17 |
Gao feng |
|
Rejected |
| [02/12] netfilter: don't register sysctl when register proto |
2012-04-17 |
Gao feng |
|
Rejected |
| [01/12] netfilter: add struct netns_ct_proto to support netfilter namespace |
2012-04-17 |
Gao feng |
|
Rejected |
| [5/9] ipvs: use adaptive pause in master thread |
2012-04-11 |
Julian Anastasov |
|
Rejected |
| patch in bugzilla |
2012-03-02 |
Jan Engelhardt |
|
Rejected |
| patch in bugzilla |
2012-03-01 |
Jonh Wendell |
|
Rejected |